diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..3e317650
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,13 @@
+# Reporting vulnerabilities
+
+Security vulnerabilities, or potential vulnerabilities, in NVIDIA
+packages should be reported to NVIDIA directly through
+[the NVIDIA Product Security](https://www.nvidia.com/en-us/security/) page.
+
+For packages maintained by the OE4T Project directly, please
+use the contatct information in the [README.md](README.md) file
+to contact us.
+
+## Branches maintained with security fixes
+
+Please see our [wiki page](https://github.com/OE4T/meta-tegra/wiki/Which-branch-should-I-use%3F) for information on currently maintained branches.